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WARRANTY 


Within  the  scope  of  the  work,  Hercules  Incorporated  warrants  that  it 
has  exercised  its  best  efforts  in  performing  this  hazards  analysis,  but 
specifically  disclaims  any  warranty,  expressed  or  implied,  that  hazards 
or  accidents  will  be  completely  eliminated  or  that  any  particular  stand¬ 
ard  or  criterion  of  hazard  or  accident  elimination  has  been  achieved  if 
the  findings  and  recommendations  of  Hercules  Incorporated  are  adopted. 


CAUTION 

Conclusions  presented  in  this  hazards  analysis  report  are  based  upon 
the  design,  materials  of  construction,  operating  conditions,  process  ma¬ 
terials  and  procedures  as  they  existed  at  the  time  of  the  analysis  (or  as 
they  were  presented  to  Hercules  for  analysis).  If  changes  in  any  of  these 
parameters  occur  in  the  future,  the  conclusions  of  this  hazard  analysis 
may  be  invalidated. 


SUMMARY 


The  objectives  of  this  report  were  to  investigate  the  design  and  oper¬ 
ation  of  the  X4  multi-tooled  Iowa  detonator  loader  (located  at  Iowa  Army 
Ammunition  Plant),  and  to  (1)  identify  critical  areas  where  a  potential 
hazard  could  result  in  a  fire  or  explosion,  (2)  evaluate  the  hazards  to 
operating  personnel  in  the  event  of  an  incident,  and  (3)  provide  design 
criteria  to  eliminate  or  control  the  hazards. 

The  potential  hazards  to  personnel  and  equipment  were  identified  and 
were  classified  into  hazard  categories  in  accordance  with  DRCPM-PBM  Mem¬ 
orandum  385-3.  Results  of  this  study  show  that: 

1.  The  accident  expectancy  in  category  IIA  (Critical)  for 
the  loader  is  1.5  x  10"  ^  accidents  per  facility  hour, 
which  exceeds  the  design  goal  of  no  more  than  1  x  10"  ^ 
accidents  per  facility  hour. 

2.  Operating  personnel  are  exposed  to  category  I1IB  (mar¬ 
ginal)  hazards  during  operation  of  the  loader.  The 
design  goal  is  that  operators  be  exposed  to  no  greater 
hazard  than  category  IV  (negligible) . 

3.  The  loader  contains  bronze  (copper  alloy)  bearings* 
which  can  become  contaminated  with  lead  azide  and  can 
form  a  compound  more  sensitive  than  lead  azide. 

4.  The  loader  must  be  kept  free  of  contamination  while  in 
operation  to  prevent  the  propagation  of  a  fire  or  ex¬ 
plosion  along  the  path  of  the  contamination  from  one 
station  to  the  next. 

5.  To  minimize  the  potential  for  personnel  injury  during 
manual  handling  of  explosives  during  maintenance  opera¬ 
tions  in  shutdown  periods,  operating  safety  procedures 
must  be  strictly  adhered  to. 

6.  Because  alcohol  and  other  solvents  are  used  during  clean¬ 

up  operations  for  this  loader,  electrical  equipment  as¬ 
sociated  with  the  loader  (particularly  that  used  in  ex¬ 
haust  ventilation  systems)  should  be  class  fled  as  Class  I, 
Division  1,  Group  D  atmos,  ^ccordan.e  with  elec¬ 

trical  equipment  and  hazards  environment  eiassit icacions, 

in  addition  to  the  currently  specified  Class  II,  Division  I, 

Group  G  dust  service.  The  tieperature  identification  number 
should  be  T5.** 

To  develop  an  optimum  system  with  minimum  hazards  to  personnel  and 
equipment,  it  is  reccxsaended  that  work  in  the  following  areas  be  considered 


It  is  noted  in  correspondence  dated  -July  8,  i960  to  Hercules  from  Vincent  A. 
Latuso  of  ARRABCOM  that  IAA?  has  used  bronze  bearings  for  many  years  with  no 
incidents. 

ft# 

rer  NEC  Code,  Table  500-2(b>,  National  Fire  Code,  Volume  Six  (1975). 


to  achieve  the  design  safety  goal  of  less  than  1  x  10"  ^  accidents  per  facility 
hour  for  category  I1A. 

1.  Determine  through  testing  the  spacing  required  between  deto¬ 
nators  to  prevent  propagation  and  to  minimize  tooling  damage. 

2.  Disassemble  the  loader  after  it  has  been  working  for  a 
number  of  hours  to  determine  if  the  interior  has  become 
contaminated.  If  contamination  has  occurred,  use  seals 
or  positive  pressure  technology  to  prevent  future  con¬ 
tamination* 

3.  After  a  hazards  analysis  has  been  conducted  for  each  sub¬ 
system  in  the  loader  bay,  perform  a  total  system  hazard 
analysis  (TSHA)  and  an  operating  and  support  hazard  an¬ 
alysis  (OSHA).  [The  TSHA  considers  the  interrelationships 
between  the  various  subsystems  (i.e.,  cup  feeding,  deto¬ 
nator  loading,  explosive  receiving  and  handling,  and 
safety  of  operations.  The  OSHA  provides  a  review  of  all 
procedures  (operating,  maintenance,  and  inspection)  used 
to  operate  the  system.] 

4.  Replace  bronze  bearings  in  the  loader  with  bearings  made 
of  compatible  materials  (e.g.,  materials  that,  when  con¬ 
taminated  with  lead  azide,  will  not  form  compounds  more 
sensitive  than  lead  azide) . 


Inspection  of  a  similar  single-station  loader  has  shown  no  contamination,  ac¬ 
cording  to  correspondence  to  Hercules  from  Vinvcnt  A.  Latuso  of  ARRADCOM  dated 
Julv  S,  I960. 
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INTRODUCTION 


Iowa  Army  Ammunition  Plant  (IAAP),  Middletown,  Iowa,  is  presently  de¬ 
veloping  an  XA  multi-tooled  Iowa  detonator  loader  to  increase  the  capacity 
of  their  detonator  loading  line.  This  loader  which  is  essentially  a 
highly  modified  version  of  an  Iowa  loader,  is  in  the  production  prototype 
stage.  The  rotating  equipment  is  a  press  loading  and  assembly  machine  de¬ 
signed  to  load  and  assemble  four  detonators  per  index  at  a  speed  of  35  to 
AS  cycles  per  minute.  The  detonators  are  loaded  with  N0L-130,  lead  azide, 
and  RDX  explosives. 

A  safety  analysis  has  been  performed  on  the  equipment.  Sensitivity 
data  of  the  explosives  involved  in  the  analysis  were  previously  published1 
by  Allegany  Ballistics  Laboratory.  The  analysis  was  performed  in  accord¬ 
ance  with  DRCPM-PBM  Memorandum  385-3,  ARMCOM  Regulation  No.  385-A,  applic¬ 
able  parent  regulations  MIL- STD-882  and  AR385-16,  and  the  contract  scope 
of  work.  The  objectives  of  the  contract  have  been  satisfied  through  tjie 
use  of  the  Hercules  Hazards  Evaluation  and  Risk  Control  Program  (HERC  . 
This  quantitative  technique,  developed  by  Hercules  in  1958,  has  been  gen¬ 
erally  accepted  throughout  the  industry  as  a  practical  and  cost-effective 
method  of  evaluating  industrial  hazards. 

The  process  information  used  by  Hercules  to  provide  the  hazard  evalu¬ 
ation  was  based  on  the  following  sources:  (1)  equipment  manual  for  XA 
series  Iowa  loader,  (2)  equipment  technical  data  package  specifications 
for  DARCOM  Project  No.  5782765,  Exp. -Line  Aa  L/A/P  Deconator  Facilities, 

(3)  drawings  supplied  by  IAAP,  and  (A)  information  obtained  from  IAAP  per¬ 
sonnel.  A  list  of  drawings  and  documents  used  in  this  analysis  is  found 
in  Appendix  A. 

This  report  includes  (I)  a  description  of  the  loader,  (2)  a  listing 
of  the  potential  hazards  associated  with  the  loader,  (3)  classification  of 
the  potential  hazards,  (A)  a  discussion  of  the  hazards  to  personnel  during 
loader  operation,  (5)  a  comparison  of  subsystem  (XA  loader)  aceident  ex¬ 
pectancy  with  the  design  goals  of  DRCPM-PBM  Memorandum  385-3,  and  (6)  recom¬ 
mendations  for  corrective  action  to  reduce  the  hazard  level  associated 
with  the  subsystem. 


*C.roc*(  T.  a.,  et  ai.,  "Hazards  Analysis  of  Deconator  Charging  Svsters," 

AO  317A-52O-0J-OO1,  Allejtanv  Ballistics  Lahoratorv,  Cumberland,  MD,  1973. 
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DISCUSSION 


DESCRIPTION  OF  LOADER  OPERATION 

The  function  of  the  .<4  Iowa  loader  is  to  load  and  assemble  the  M-55  deto¬ 
nator,  a  small  aluminum  cup  capped  with  aluminum  foil  containing  three  con¬ 
solidated  explosives.  The  rotating  body  of  the  loader  is  manufactured  by 
Swanson  Erie  Company  and  is  powered  by  a  3  HP,  1750  rpm  motor  with  a  vari¬ 
able  pitch  sleeve  driving  a  shaft  through  an  air  clutch  and  brake  system. 

There  are  24  work  stations  around  the  machine  for  different  operations, 
with  each  station  capable  of  producing  a  group  of  four  detonators.  The  ma¬ 
chine  can  operate  at  variable  speeds  and  can  produce  detonators  at  a  ratt 
of  approximately  200  per  minute.  All  stations  operate  simultaneously;  i  .  ., 
each  indexing  step  stoves  the  machine  1/24  revolution,  and  a  new  batch  c 
detonators  is  started  through  the  process  after  each  indexing  step. 

The  operations  start  at  station  1  where  aluminum  cups  from  a  cup  feed¬ 
ing  mechanism  are  positioned  on  the  indexing  table.  The  cups  are  placed  in 
tooling  blocks  in  groups  of  four  by  means  of  vacuum  entrapment.  The  ‘able 
is  then  indexed,  moving  the  cups  to  station  2  where  the  operation  continues 
on  the  first  load  of  cups  while  a  second  load  of  cups  is  loaded  at  station  1. 
At  station  2,  a  powder  guide  is  placed  over  each  cup  and  is  held  in  place  by 
a  spring  plunger  pin  which  uses  a  pick  and  place  mechanism.  From  here  the 
aluminum  cups  are  indexed  through  station  3  (an  access  door  station)  and 
into  position  at  stations  4  and  5,  where  metering  of  the  first  explosive 
takes  place.  In  this  explosive  filling  operation,  a  phenolic  spoon*  scoops 
the  primer  material  (NQL-130  explosive)  from  an  aluminum  bowl.  The  spoon 
is  lifted  and  the  excess  explosive  is  removed  from  the  spoon  by  a  velo- 
scat  doctor  blade.  Then  the  remaining  explosive  is  dropped  into  a  powder 
chute.  The  explosive  passes  through  the  powder  guide  and  into  the  detonator 
cup. 


Ac  station  7  the  NGL-13G  explosive  is  compressed  to  approximately  530  MPa 
(84,000  psi)  in  the  detonator  cup. 

After  passing  through  another  aceess  door  station,  the  eups  are  indexed 
to  stations  9  and  10  where  lead  aside  is  dispensed  from  a  feed  hopper  into 
the  detonator  cups.  In  netering  of  this  explosive,  a  volumetric  ball  feed¬ 
ing  mechanism  is  used  in  which  the  lead  aside  is  gravity  fed  from  a  hopper 
into  volumetric  sited  holes  drilled  into  four  balls  attached  to  a  shaft. 
Rotation  of  the  shaft  results  in  a  turnover  of  the  balls  and  emptying  of 
the  explosive  into  the  detonators. 

At  station  ll  the  load  aside  in  the  cups  is  compressed  to  approximately 
10 J. 4  M?a  (15,000  psi).  The  operation  at  this  station  is  similar  to  that  at 
station  7,  and  a  hydraulic  systen  is  used  for  controlling  the  pressure  which 
is  developed  by  thu  mechanical  action  of  the  leader. 

At  station  12  aspirators  are  used  to  remove  from  the  powder  guides 
any  loose  explosive  that  was  net  consolidated  during  the  i  expression  oper¬ 
ations.  After  this  vacuum  cleanup  operation  is  perforated,  the  table  is 


It  is  noted  in  correspondence  dated  July  $,  to  Hercules  fro®  Vincent  A. 

Lotus ^  of  ARSADC0M  that  the  spoon  material  Has  been  changed  to  stainless  stee 


indexed  and  the  detonators  are  transferred  to  station  13.  Here  the  powder 
guides  are  removed  from  the  tool  block  and  placed  on  the  rest  posts.  A 
pick  and  place  mechanism  working  in  reverse  of  that  at  station  2  is  used 
for  this  removal  operation. 


At  station  14  RDX  pellets  are  fed  into  the  sliding  pellet  feeder  and 
are  transferred  over  the  detonator  cups  where  the  pellets  are  ejected  by  a 
ram.  The  RDX  is  next  compressed  to  approximately  69  MPa  (10,000  psi)  at 
station  15  by  an  air  driven  hydraulic  pump  and  press  arrangement  similar 
to  those  at  the  previous  compression  stations.  After  compression,  extran¬ 
eous  explosive  is  removed  by  the  aspirator  at  station  16. 


After  the  explosive  metering  and  compression  operations,  the  deton¬ 
ators  are  capped  with  foil  which  is  stripped  from  reels  and  fed  through 
rolls  and  cutting  dies.  Foil  is  placed  into  the  detonator  cup  located  on 
the  explosive  beneath  the  lip  of  the  cup,  thus  enabling  the  cup  to  be 
crimped.  After  the  lip  of  the  cup  has  been  raised  above  the  upper  edge  of 
the  crimping  tool  block,  a  crimping  tool  is  lowered.  The  cup  is  crimped 
over  the  foil  disc  to  45°  at  station  19  and  is  crimped  to  90°  at  station  21. 
After  the  crimping  operation,  the  detonator  cup  is  raised  from  the  tool 
block  and  moved  upward  into  a  rubber  0-ring  held  by  the  transfer  tool.  The 
transfer  tool  is  then  positioned  over  the  carrying  card  and  the  detonator 
cups  are  then  transferred  to  the  metal  carrying  card,  where  they  are  moved 
to  the  accept-reject  station.  Detonator  cups  which  have  been  deemed  unac¬ 
ceptable  at  any  step  in  the  process  are  ejected  from  the  carrying  card  with 
compressed  air  and  allowed  to  fall  down  a  pipe  chute  into  a  reject  con¬ 
tainer.  Next,  the  card  is  pushed  off  the  machine  by  a  ram  into  a  conveyor 
for  final  packout  operations. 


MATERIAL  SENSITIVITY 

Explosives  used  in  the  detonators  are  described  in  table  1.  Two  of 
these  explosives  (N0L-130  and  lead  azide)  are  primary  explosives^  which  are 
extremely  sensitive  to  mechanical  action,  shock  or  electrical  energy.  These 
explosives  will  detonate  rather  than  deflagrate  or  burn  when  initiated  be¬ 
cause  the  rate  of  advance  of  the  reaction  zone  into  the  unreacted  material 
will  exceed  the  velocity  of  sound  in  the  unreacted  material.  The  third 
(RDX)  is  considered  to  be  a  secondary  high  explosive  (sensitive  to  initia¬ 
tion)  wnich  can  be  detonated  by  the  explosive  shock  from  a  primary  explo¬ 
sive.  The  sensitivity  characteristics  of  these  explosives  in  the  detonator 
were  reported  in  previous  reports;  therefore  no  sensitivity  tests  were  per¬ 
formed  during  this  study. 

Applicable  data  generated  earlier  by  Hercules  are  summarized  in  tables 
1  through  5.  Probit  curves  were  developed  from  the  friction,  impact  and 
electrostatic  discharge  material  response  test  results  and  were  used  to 


2 

Engineering  Design  handbook,  Ammunition  Series  Fuzes,  Headquarters,  U.  S. 
Amy  Materiel  Command,  AMCP  706-210,  November  1969. 
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determine  probability  of  initiation  in  the  analysis  of  the  loader.  These 
curves  are  shown  as  Appendix  B. 


Table  1.  Explosive  materials  used  in  M55  detonators 


Explosive  Description 

NOL-130  Composition:  40%  lead  styphnate 

20%  lead  azide 
20%  barium  nitrate 
15%  antimony  sulfide 
5%  tetracene 


Lead  azide  This  composition  will  form  extremely  sen¬ 
sitive  and  dangerous  copper  azide  in 
presence  of  moisture  with  copper 

RDX  This  explosive  is  considered  to  be  the 

second  most  powerful  standard  military 
explosive.* 


TOTAL 


Weight  (mg) 
15 


52 


19 


86 


A; 

Military  Explosives,  Department  of  the  Army  and  the  Air  Force  Techni¬ 
cal  Manual,  TM  9-1300-214  to  UA-1-34,  1967. 


The  threshold  initiation  levels  (TIL)  for  impact,  friction,  electro¬ 
static  discharge,  and  impingement  of  the  explosives  used  in  the  detonators 
are  shown  in  table  2. 


Impingement 

Table  3  shows  the  results  of  impingement  tests  (previously  conducted) 
for  the  explosives  used  in  the  detonator.  Neither  NOl-130  nor  RDX  could 
be  initiated  when  tested  with  air  stream  velocities  up  to  346  m/s  (68,000 
ft  per  min).  However  a  threshold  initiation  level  was  established  for  lead 
azide  at  42  a/s  (8250  ft  per  Bin).  Because  of  the  impingement  sensitivity 
of  lead  aside,  the  air  stream  velocity  in  the  dust  pickup  system  (aspirator) 
should  be  limited  to  42  o/s  (8250  ft  per  min). 


Dust  Explosibility 

Table  d  shows  the  results  of  dust  explosibility  tests  (previously  con¬ 
ducted)  for  NOL-130.  The  minimum  energy  required  to  initiate  the  dust  is 
the  same  as  chat  required  for  initiation  of  the  explosive  by  electrostatic 
discharge.  The  minimum  dust  concentration  required  for  initiation  of  NOL-130 
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Table  3. 

Impingement  initiation  test 

results 

Air  stream  velocity 

Explosive 

m/s 

ft/min 

Tials 

Shots 

Results 

NOL-130 

33.0 

6,500 

1 

0 

63.0 

12,400 

1 

0 

122.5 

24,100 

1  ' 

0 

175.4 

-  34,500 

1 

0 

345.7 

68,000 

10 

0 

TIL 

Lead  azide 

33.0 

6,500 

4 

0 

42.0 

6,250 

10 

0 

TIL 

47.0 

9,200 

1 

1 

No  noise 

.  63.0 

12,400 

1 

1 

Slight  noise 

RDX 

345.0 

68,000 

10 

0 

TIL 

Table  4.  Dust  explosibility  test  results  for  NOL-130 


Minimum  cc-_centration 

Minimum  energy*3 
Total  vo?atiles 


0.037  kg/m3 
(0.37  oz/ft^l 

0.0028  joules 
0.05Z 


Maximum  pressure,  GPa 

(p«ig)u 

Average  rate  of  pressure 
rise,  GPa/s  (psig/sec)c 

Maximum  rate  of  pressure 
rise,  CPA/s  (psig/sec)c 


0.5 


Concentration,  kg/m^  (oz/ft^) 


1.0, 


:.o 


1x10-9  (20 
0.002  (301) 
0.004  (573) 


3.4xn-4  (493 
0.014  (2093) 
0.030  (4410) 


6.2xl0“4  (90) 
0.032  (4709) 
0135  (19580) 


^over  explosive  limit.  Ignition  source,  continuous  24-watr  spark. 

^Minimum  energy  determined  by  variable  spark  discharri  at  twice  the  mini¬ 
mum  concentration. 

c Average  of  three  tests. 
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is  0.37  kg/ra^  (0.37  oz/ft3).  In-process  concentrations  of  dust  would  not  be  ex¬ 
pected  to  be  as  high  as  this  minimum. 

Electrostatic  Charge  Generation 

In  a  previous  study,  the  electrostatic  charge  generation  potential  of 
the  detonator  explosives  and  the  specific  conductivities  of  NOL-130  and  lead 
azide  were  determined.  The  bulk  resistivity  was  determined  by  placing  a 
sample  of  NOL-130  or  lead  azide  between  two  electrodes  and  measuring  the  re¬ 
sistance  with  a  Keithley  electrometer  and  then  calculating  the  specific  con¬ 
ductivity.  The  bulk  resistivity  of  both  NOL-130  and  lead  azide  was  greater 
then  10^  ohms.  The  specific  conductivity  for  NOL-130  was  less  than  1.5  x 
10*^5  mhos  per  cm  and  for  lead  azide  it  was  less  than  8  x  10~16  mhos  per  cm 
(see  table  5). 


HAZARDS  ANALYSIS  OF  LOADER 

Table  6  shows  the  accident  expectancy  (50%  confidence)  for  each  hazard 
category  of  the  X4  loader  and  table  7  shows  the  accident  expectancy  for  each 
hazard  identified  for  the  loader.  Table  8  shows  the  time  between  accidents 
for  each  category  and  is  another  format  for  presenting  expectancy  informa¬ 
tion  that  is  suggested  by  DROPM-PBM  Memorandum  335-3. 

Table  9  shows  the  result  of  a  subsystem  hazard  analysis  (SSHA)  conducted 
for  the  loader.  These  data  identify  the  potential  hazards  associated  with 
the  X4  loader,  indicate  the  probability  (95%  confidence)  of  a  fire  or  ex¬ 
plosion  associated  with  each  hazard,  and  categorize  each  potential  hazard  or 
accordance  with  DRCPM-PBM  Memorandum  385-3.  A  more  detailed  explanation  of 
the  information  contained  in  these  tables  may  be  found  in  Appendix  C.  In 
addition  to  the  fact  sheets,  it  was  required  that  ARMCOM  Form  153-R  be  pre¬ 
pared.  Table  10  presents  the  completed  form  for  each  accident  category  for 
the  mean  probability  of  an  accident  occurring  per  man  hour  or  facility  hour. 

It  should  be  noted  that  DRCPM-PBM  Memorandum  385-3  specifies  that  these 
design  goals  are  for  a  "project,"  so  that  the  design  goals  would  apply  to 
the  entire  M55  detonator  manufacturing  system.  However,  for  the  purposes  of 
this  analysis,  only  the  X4  loader  is  being  considered  relative  to  the  design 
goals 

There  were  no  category  I,  II-B  or  IV  hazards  identified.  The  accident 
expectancy  met  design  goals  for  categories  III-A  and  III-B.  For  category 
II-A,  the  design  goal  was  exceeded  due  primarily  to  the  potential  hazard 
(stations  4  and  5)  of  the  spoon  (or  Che  setscrews  securing  the  spoon  to  the 
holder)  impacting  the  guide  chute  if  the  screws  fail  or  loosen.*  If  a  re¬ 
dundant  method  for  securing  the  spoons  is  used  and  if  the  setscrews5  are  potted 
to  prevent  loosening,  then  the  expectancy  for  category  II-A  can  be  reouced 
to  1.9  x  10* 7  accidents  per  facility  hour,  which  meets  the  design  goal. 

* 

In  similar  single-tocled  machines,  no  incidents  of  this  type  have  been  detected 
while  producing  millions  of  detonators,  according  to  correspondence  from 
Vincent  A.  Latuso  of  A^RADCOM  dated  July  8,  1980. 
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Table  5.  Electrostatic  characteristics  of  NOL-130  and  lead  azide 


Bulk  resistivity 
Sample  thickness 
.Conductivity* 


NOL-130 

10^4  ohms 
0.58  cm 

<1.5  x  10“ 15  mho/cm 


Lead  Azide 

1014  ohms 

0.20  cm 

<8  x  10“ 16  mho/cm 


Using  the  relationship  that  conductivity  *  (1/R)  (//A)  where  R  is  the 
bulk  resistivity,  l  is  the  sample  thickness,  and  A  is  the  area 
of  the  sample. 


Table  6.  Accident  expectancy  summary  for  loader 


Accidents  expected 
per  facility  hour 

Accidents  expected 
per  man  hour 

Hazard  category 

Design  goal 

From  SSHA 

Design  goal 

From  SSHA 

IA 

<1  x  10'6 

None 

identified 

IB 

<1  x  10”7 

None 

identified 

IIA 

<1  x  10-5 

1.4  x  IQ’5 

IIB* 

<1  x  10-6* 

None 

identified 

niA 

<1  x  10”  3 

2.23  x  10” 3 

IIIB* 

<1  x  10”6* 

1.4  x  10”7 

IV 

1 

None 

Identified 

1 

None 

identified 

The  sum  of  the  probabilities  of  113  and  IIIB  shall  be  1  x  10  6  or  less. 


Table  7.  Iowa  X4  loader  accident  exoectancv 


Hazard 

category 

III-A 

I II- A 

III-A 

III-A 

III-B 

1 1- A 

1 1- A 

1 1- A 

I I-  A 

III- B 

III-A 

III-A 

III-A 

III-A 


Accidents  p'er 

Potential  initiation  hazard  Facility  hour  Man  hour 


Station  1 


1.  Friction  between  cup  press  tool  and  tool  1.6  x  10“  5 
block  when  tool  block  is  contaminated. 


Station  2 


1.  Guide  is  picked  up  from  storage  post 
and  placed  on  tool  block 

(Powder  guide  is  dropped  from  tool.)  1.6  x  10“  18 

2.  Friction  between  powder  guide  and  8  x  10“10 

placement  tool  finger  due  to  misalign¬ 
ment. 


3.  Normal  friction  occurs  between  powder  8  x  10“21 
guide  and  placement  tool  finger. 

4.  Operator  drops  powder  guide  during  1.6  x  10“P 

check  of  handler 


Stations  4  and  5 


1.  Friction  between  doctor  blade  and 
spoon  (normal) 

2.  Friction  between  doctor  blade  and 
spoon  (abnormal) 

3.  Normal  operation  of  bearing 

4.  Spoon  falls  down  into  guide  chute 
3.  Doctor  blade  slide  contaminated 


6  x  10-12 

6  x  10-15 

1.4  x  10-10 
1.4  x  10-S 

1  x  10-7 


Station  7 


1.  Friction  between  cool  and  powder  guide 

2.  Tool  impacts  powder  guide  due  to  mis¬ 
alignment 

3.  Tool  impacts  tool  block  when  P.C.  not 
present 

4.  RAM  tool  breaks  during  compression 


8  x  10-8 
8  x  10-8 

4  x  10-18 

4.8  x  10-8 
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Table  7  (cont'd.) 

Hazard  Accidents  per 

category  Potential  initiation  hazard  Facility  hour  Man  hour 


Stations  9  and  10 


II-A 

1. 

Dispenser  seal  on  azide  dispenser  be¬ 
comes  worn 

6  x 

10-9 

III-B 

2. 

Initiation  of  lead  aziae  occurs  due  to 
ESD  from  ungrounded  operator 

3.6  x  10-12 

III-B 

3. 

Initiation  occurs  during  adjustment  of 
set  screws 

5.6  x  10-11 

III-B 

4. 

Initiation  occurs  during  placement  of 
container  on  platform 

<  6  x  10-15 

II-A 

5. 

Impingement  occurs  while  dumping 

1.2  x 

10-19 

Station  11 

III-A 

1. 

Friction  occurs  between  tool  and  powder 
guide 

8  x 

O 

1 

oo 

III-A 

2. 

Tool  impacts  P.G.  due  to  misalignment 

8  x 

oo 

1 

o 

H 

III-A 

3. 

Tool  impacts  tool  block  when  P.G.  not 
present 

4  x 

10-18 

III-A 

4. 

RAM  tool  breaks  during  compression 

• 

CD 

x  10-8 

III-A 

5. 

RAM  tool  impacts  broken  RAM  from  NOL 
station 

8  x 

10-7 

Stations  12,  16,  20,  and  24 

III-A 

1. 

ESD  occurs  between  vacuum  tool  and 
tool  block 

4  x 

10-9 

III-A 

2. 

Vacuum  tool  impacts  a  broken  tool 

3.0 

x  10-13 

III-A 

3. 

Friction  between  vacuum  tool  and  P.G, 
(normal) 

6  x 

io-i* 

III-A 

4. 

Friction  between  vacuum  tool  and  P.G. 
(abnormal) 

8.8 

x  10'18 

III-A 

5. 

Friction  occurs  in  bearing 

8  x 

lo-n 

Table  7  (cont'd.) 


Hazard 

Potential  iniriation  hazard 

Accidents 

per 

category 

Facility  hour 

Man  hour 

Station  13 

III-A 

1. 

Powder  guide  is  dropped  to  indexing 
table 

1.6  x  10-18 

III-A 

2. 

ESD  occurs  when  removing  P.G. 

<2  x  10-15 

III-A 

3. 

Friction  occurs  when  P.G.  removed  with 
broken  tool  present 

8  x  10*7 

III-A 

4. 

Tool  not  raised  resulting  in  P.G.  being 
dropped 

8  x  10~8 

III-A 

5. 

Tool  not  raised  resulting  in  impact 

3.2  x  10*13 

III-A 

6. 

Friction  occurs  between  removed  tool 
finger  and  P.G. 

8  x  10*  71 

III-A 

7. 

Friction  occurs  between  slider  block 
and  tool  support 

4  x  IQ-6 

Station  14 

1 1- A 

1. 

Friction  of  pellet  on  slide  occurs  due 
to  misalignment  of  pellet  slide 

6.4  x  lO’iO 

1 1- A 

2. 

Pellet  punch  tool  impacts  pellet  slide 

2  x  10*8 

II-A 

3. 

Pellet  punch  tool  impacts  tool  block 

8  x  10-8 

1 1- A 

4. 

Friction  of  cool  on  tool  block  occurs 

8  x  io-8 

III-B 

5. 

Friction  initiation  occurs  during  re¬ 
placement  of  pellet  tubes 

2.6  x  10-8 

Station  15 

III-A 

1. 

Tool  compresses  RDX  and  checks  powder 
height 

4  x  10-13 

Station  17 

III-A 

1. 

Friction  of  foil  disc  on  cup 

2  x  lO*8 

III-B 

2. 

Friction  initiation  occurs  during  re¬ 
placement  of  worn  punches  and  dies 

1.4  x  10-8 
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Table  7  (Cont'd.) 


Hazard 

category  Potential  initiation  hazard 

Stations  19  to  21  , 


Accidents  par _ 

Facility  hour  Man  hour 


III-A  1.  Initiation  of  detonator  occurs  during 
crimping 

a.  Foil  disc  failure  occurs  1.1  %  1C~H 

b.  Detonator  cup  stuck  in  tooling  or  2  x  10" 7 

backup  mechanism  stuck 


Station  23 


III-B 

1.  Initiation  of  explosive  occurs  during 
changing  of  rubber  chucks 

<2  x  10- 

Summary 

I 

None 

II-A 

Total:  Hazard  Category  II-A 

1.4  x  10*5 

III-A 

Total:  Hazard  Cateogry  III-A 

2.2  x  10-5 

III-B 

Total:  Hazard  Category  III-B 

1.4 

15 
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NOTE:  All  cases  are  for  X4  loader  subsystem  as  analyzed;  i.e.t  no  recommended  changes  made. 

Expected  time  between  accidents  should  be  substantially  increased  if  the  suggested 
changes  are  made  to  the  subsystem. 


In  the  analysis  of  the  process  operations  of  the  loader,  the  areas  of 
primary  concern  are  those  in  which  personnel  can  be  injured  and  those  areas 
where  initiation  of  the  explosives  can  result  in  3evexe  equipment  damage. 
The  following  sections  discuss  in  detail  these  ar^is  of  concern. 


Design  Approach  to  Control  of  Personnel  Exposure 

Potential  injury  to  personnel  during  operation  of  the  loader  has  been 
minimized  by  the  design  of  the  loader  and  by  safety  restraints  incorporated 
into  the  operating  procedures.  To  protect  personnel  in  the  vicinity  of  the 
loader  in  event  of  a  detonation,  the  operating  areas  of  the  machine  have  been 
totally  enclosed  by  a  protective  shield.  A  transparent  Plexiglas® /Lexan® 
barrier  surrounds  the  loader  at  all  stations  except  the  explosive  dispens¬ 
ing  and  consolidation  stations  which  are  enclosed  by  steel  barricades  having 
observation  windows  to  observe  process  operations.  Additionally,  those  sta¬ 
tions  in  which  the  bulk  of  the  explosive  is  processed  incorporate  vertical 
venting  to  ensure  escape  of  gases  in  the  event  a  detonation  within  the  barri¬ 
cade  occurs. 

To  minimize  potential  injury  to  the  operators  performing  explosive  re¬ 
plenishment  operations,  refill  operation?:  are  limited  to  handling  the  more 
hazardous  of  the  explosives,  MOL-130  and  lead  azide,  in  two  ounce  increments. 
Further,  all  explosives  contained  in  the  machine  are  enclosed  in  barricades 
which  have  oeen  designed  and  tested  for  the  explosive  quantity  involved  so 
as  to  present  no  hazard  to  operating  personnel  in  the  immediate  area. 


Potent ial  Hazards  to  Personnel 


During  toe  tuanufacture  of  the  detonators,  injury  to  personnel  can  oc¬ 
cur  primarily  in  four  ways:  (1)  during  maiual  refilling  of  explosives  in 
the  detonator  loading  machine,  (2)  during  maintenance  of  the  system  or  dur¬ 
ing  "process  upset"  conditions  where  operators  may  adjust  or  attempt  to  ad¬ 
just  a  portion  of  the  mechanism  within  the  shielded  area  of  the  loader, 

(3)  during  daily  cleaning  of  the  machine,  cleaning  of  the  aspirator  collector 
svstem,  and  removal  of  defective  detonators,  and  (4)  from  an  initiation 
within  the  machine  by  which  injury  results-,  from  projectiles  emitted  from  an 
internal  detonation  or  where  injury  results  from  the  reactions  of  an  oper¬ 
ator  after  an  explosion  within  the  loader. 


Manual  Explosive  Handling  -  Manual  handling  of  the  explosive  material 
occurs  during  replenishment  of  the  N0L-130  bowl,  refilling  the  lead  asidc- 
and  replacement  of  the  RDX  cartridge  tubas. 

In  refilling  the  HOL-130  scooper  bowl,  a  conductive  rubber  receptacle 
holding  two  ounces  of  explosive  is  manually  placed  inside  the  foyer  of  the 
KOL-130  barricade  on  the  draping  platform.  The  outside  gate  of  the  barri¬ 
cade  is  then  closed  and  the  inner  gate  of  this  primer  barricade  is  opened. 
The  explosive  is  Chen  draped  into  the  scooper  bowl  by  manual  rotation  of  an 
external  handle  which  is  mechanically  linked  to  eha  dumping  platform.  This 
operation  is  then  repeated  to  load  the  second  scooper  bowl. 
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Replenishment  of  the  lead  azide  dispenser  is  performed  using  a  pro¬ 
cedure  which  is  approximately  the  same  as  that  used  when  replenishing  NOL-130. 
The  primary  difference  is  that  the  carrier  is  placed  in  the  dumping  platform 
and  is  secured  with  surgical  tubing  prior  to  dumping. 

The  events  which  could  result  in  potential  injury  during  manual  hand¬ 
ling  of  explosives  are  as  follows: 

1.  Electrostatic  discharge  from  the  operator.  Because 
*  human  hp<ng  ran  typfrw  1 1y  flrTcnmiilate  an  electrical 

charge  of  0.013  joule,  which  is  much  greater 
than  the  TIL's  for  NOL-130  and  lead  azide  (0.0022 
and  0.028  joule,  respectively)  it  is  essential 
that  personnel  and  equipment  be  grounded  at  all 
times  to  prevent  an  electrostatic  discharge  from 
occurring.  Under  such  grounded  conditions,  the 
expectancy  of  a  fire  or  explosion  resulting  from 
Che  potential  hazard  would  be  relatively  low  at 
3.6  x  10" 12  per  man  hour. 

2 .  Dropping  the  explosive  container  while  carrying 
it  to  the  machine.  Caution  should  be  exercised 
by  operators  when  handling  containers  of  explo¬ 
sives  because  dropping  could  possibly  initiate 
the  explosive,  thus  causing  injury.  The  impact 
energy  developed  by  an  inadvertently  dropped 
container  would  be  approximately  6300  Jf m2  (3  ft_ 
lb/ln. 2)  which  is  substantially  less  than  the 
material  response  (rubber/steel)  for  NOL-130 
which  is  greater  than  2.9  x  10$  J/m2  (136  ft-lb/ 
in. 2).  a  safety  margin  of  45  and  an  expectancy 
of  1  x  10-10  accidents  per  nan  hour  exists  for 
this  potential  hazard. 

3.  Friction  occurring  when  the  receptacle  Is  placed 
onto  a  contaminated  platform  within  the  barricade. 

Because  of  the  relatively  low  frictional  force 
encountered  during  this  operation  and  the  use  of 

a  conductive  rubber  container,  the  expectancy  of 
an  accident  resulting  from  this  potential  hazard 
is  considered  to  be  remote  (5  x  10“1&  accidents 
per  man  hour) . 

4.  Impingement  of  the  explosive  when  dteaplng  the 
explosive  froa  the  carrying  receptacle  into  its* 
respective  container.  Because  the  TIL  for  lead 
azide  impingement  is  41.9  a/s  (8250  ft/«in)  and 
the  free-fall  impingement  velocity  during  dumping 
would  be  less  than  1.5  a/s  (100  ft /sin)  the  ex¬ 
pectancy  for  1  potential  accident  as  a  result  of 
impingement  is  less  than  1.2  x  10”^  accidents  per 
facility  hour. 
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Because  the  gate  ts  closed  between  the  operator  and  the  explosive  being 
dumped,  the  probability  of  personnel  injury  resulting  from  debris  caused  by 
an  explosion  during  the  dumping  operation  is  considered  to  be  remote.  How¬ 
ever,  a  bright  flash  would  occur  from  initiation  of  the  explosive  in  the  re¬ 
ceptacle  and  the  explosive  in  the  powder  scooper.  If  witnessed  by  an  oper¬ 
ator  through  the  observation  window,  tills  bright  flash  could  possibly  result 
in  eye  injury  or  temporary  blindness.  Additionally,  secondary  actions  of 
the  operator  reacting  away  from  such  an  incident  could  also  lead  to  poten¬ 
tial  injury  depending  upon  the  proximity  of  other  equipment  or  personnel  be¬ 
hind  the  operator.  For  these  reasons,  and  to  minimize  any  potential  explo¬ 
sion,  the  total  quantity  of  explosive  placed  in  the  powder  scooper  at  any 
one  time  must  be  strictly  regulated  and  maintained  within  the  limit  capabili¬ 
ties  of  the  barricade  and  the  observation  window.  Additionally,  safety  inter¬ 
locks  which  ensure  proper  gate  movement  should  be  periodically  checked  to 
ensure  proper  functioning. 

RDX  is  fed  to  the  detonators  from  a  row  of  eight  stainless  steel  tubes. 
Refilling  of  this  station  with  RDX  is  performed  by  manual  replacement  of 
the  empty  tubes  with  a  rack  of  tubes  filled  with  RDX  pellets. 

The  primary  hazards  of  concern  during  this  operation  are  (1)  the  direct 
initiation  of  the  pellets,  or  (2)  initiation  of  explosive  conta*  nation  sur¬ 
rounding  the  rack  area  with  subsequent  initiation  of  the  pellets.  With  fric¬ 
tion  occurring  between  metallic  surfaces,  an  in-process  potential  of  0.3  GPa 
(48K  psi)  at  0.15  o/s  (0.5  fps)  was  compared  to  the  material  response  TIL  of 
0.46  GPa  i67K  psi)  at  9.3  m/s  (1  fps)  for  RDX  and  a  safety  margin  of  0.4  was 
calculated.  From  the  overall  probability  of  explosion  (5  x  10-9),  an  expec¬ 
tancy  of  3.9  x  10“^  accidents  per  man  hour  was  derived  for  the  event.  To 
maintain  the  expectancy  level,  extreme  care  must  be  exercised  by  the  operator 
during  this  refill  operation  to  eliminate  any  impact  or  friction  stimuli  which 
could  result  from  faulty  handling  procedures.  Additionally,  the  rack  replace¬ 
ment  area  must  be  kept  free  of  contamination  so  that  initiation  cannot  result 
from  inadvertent  contact  between  contaminated  parts. 


Maintcnancc/Process  Upset  Conditions  -  Maintenance  and  process  upset 
conditions  are  conducive  to  personnel  injury  primarily  as  a  result  of  the 
contaminated  conditions  which  may  exist  in  the  equipment  and  the  exposure 
of  personnel  to  unbarricaded  machine  parts.  In  maintenance  operations,  the 
tightening  or  removal  of  a  contaminated  bolt  can  He  particularly  hazardous 
due  to  the  small  area  of  potential  contact  and  the  resulting  high  stress 
energy  placed  on  any  contaminant  present.  During  process  upset,  corrections 
and  equipment  adjustment*  should  not  he  attempted  without  thoroughly  clean¬ 
ing  the  equipment.  To  minimise  potential  injuries,  careful  clean-up  should 
be  required  before  maintenance  operations,  exposed  threads  should  be 
patted  to  prevent  contamination.  Emergency  maintenance  should  be  performed 
with  the  proper  awareness  that  all  surfaces  may  be  contaminated  with  explo¬ 
sive. 

Because  the  in-prc-cess  potential  for  maintenance  operations  and  process 
upset  conditions  will  frequently  be  greater  than  the  material  response  of  the 
explosive,  no  safety  margin  will  exist  and  the  probability  of  initiation 
will  be  one.  If  the  process  upset  occurs  as  a  result  of  equipment  failure 
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(the  event  probability  will  equal  the  failure  rate;  i.e.,  7  x  10“6)  and  the 
presence  of  explosive  is  due  to  operator  error  (fails  to  follow  procedure 
and  does  not  clean  prior  to  maintenance;  i.e.,  lx  10~6) ,  the  total  prob¬ 
ability  of  explosion  can  be  as  low  as  7  x  10--2  which  would  lead  to  an  ex¬ 
pectancy  of  5.6  x  10“H  accidents  per  man  hour. 


Clean-Up  Operations  -  Daily  clean-up  operations  can  become  occasions 
for  personnel  injury  depending  on  the  operator's  attitude  because  of  the 
existing  potential  for  an  explosive  incident.  These  operations  generally 
occur  at  the  end  of  a  shift,  at  which  time  operators  tend  to  become  lax 
and  less  than  normally  conscious  of  the  safety  requirements  for  the  task  at 
hand.  Additionally,  another  potential  initiation  hazard  exists  during 
clean-up  with  the  use  of  alcohol.  Alcohol  is  hazardous  because  its  vapors 
will  combine  with  air  to  form  a  combustible  mixture.  Within  its  flammabil¬ 
ity  limits,  alcohol  can  be  initiated  by  an  electrostatic  discharge  at  an  en¬ 
ergy  level  which  is  one-tenth  of  that  required  to  initiate  lead  azide. 
Therefore  it  is  imperative  that  adequate  ventilation  be  maintained  during 
clean-up  operations  when  alcohol  is  being  used. 

All  electric  motors  and  electrically  operated  components  have  been 
specified  on  the  drawings  as  explosion  pro-  £  in  accordance  with  the  NEC 
for  Class  II,  Division  I,  Group  G  for  hazardous  locations.  This  classifi¬ 
cation  is  not  adequate  for  operating  conditions  in  the  presence  of  flammable 
vapors.  Therefore,  if  alcohol  or  other  solvents  are  to  be  used  for  cleanup 
operations,  electrical  utilities  and  assemblies,  particularly  those  for  ex¬ 
haust  ventilation  systems  should  include  the  hazards  classification  for  a 
Class  I,  Division  I,  Group  D  atmosphere.  Temperature  identification  number 

should  be  T5.* 


Personnel  Injury  Resulting  From  Machine  Incident  -  Due  to  the  presence 
of  the  barricade  system  which  is  designed  to  withstand  an  explosion  of  its 
explosive  ingredients,  and  the  presence  of  the  plastic  screen  around  the 
loader,  the  probability  of  a  projectile  being  emitted  by  an  initial  explo¬ 
sion  in  the  machine  is  considered  to  be  low.  However,  because  the  hopper 
is  designed  to  be  larger  than  its  operating  capacity  to  minimize  spillage, 
it  is  possible  that  excessive  quantities  of  explosive  can  be  added  to  the 
machine.  This  would  reduce  the  effectiveness  of  the  barricade.  To  prevent 
this  occurrence  it  is  emphasized  that  strict  adherence  to  procedures  must 
be  enforced  snd  that  no  more  than  the  specified  quantity  of  explosive  can 
be  allowed  to  be  added  to  any  container  in  the  barricade. 


Equipment  Hazards  -  Potential  initiation  hazards  to  the  equipmeut  are 
of  concern  because  explosive  initiation  within  the  equipment  could  result 
in  severe  equipment  damage  with  resulting  downtime  and  in  potential  person¬ 
nel  injury.  Hazards  to  the  equipment  are  listed  in  tables  9  and  10. 

The  new  loader  design  processes  four  detonators  simultaneously  in  every 
station,  moving  the  groups  of  four  progressively  from  one  station  to  the 
next.  To  reduce  severity  of  an  incident,  there  must  not  be  a  propagation 
link  between  these. stations  or  a  propagation  link  between  any  detonator 

*Tbs  National  Electrical  Code,  Table  500-2 (b) ,  National  Fire  Code,  Volume 
Six,  1975. 


and  an  explosive  hopper.  Therefore,  the  table  and  path  of  the  detonator  must 
be  kept  in  a  condition  in  which  an  explosion  cannot  propagate  due  to  the 
presence  of  contamination.  The  detonators  must  be  separated  to  a  distance 
that  explosion  of  one  will  not  propagate  to  the  adjacent  detonator.  Ex¬ 
plosive  filling  operations  should  be  such  that  an  intermediate  operation  or 
piece  of  equipment  will  ensure  that  a  continuous  chain  of  explosive  does 
not  exist  between  any  detonator  being  processed  and  the  site  of  an  explosion. 
It  is  suggested  that  the  filling  station  be  examined  closely  to  determine 
what  modifications,  if  any,  would  be  required  to  prevent  an  incident  from 
propagating  to  the  explosive  in  the  bowl  if  initiation  of  the  detonator  oc¬ 
curred  during  filling  operations. 

Accumulation  of  explosive  in  the  interior  of  the  turntable  could  possi¬ 
bly  result  in  major  equipment  damage  and  injury  to  operating  and  maintenance 
personnel.  This  accumulation  of  explosive  in  the  inner  workings  of  the  ma¬ 
chine  would  be  increased  if  the  solvent  used  for  clean-up  is  allowed  to  flow 
into  the  machine  interior  and  carry  explosive  along  with  the  solvent.  There¬ 
fore,  it  is  recommended  that  the  prototype  machine  be  disassembled  after  a 
period  of  working  time  to  determine  if  contamination  of  the  interior  has  oc¬ 
curred.  If  contamination  is  apparent,  seals  or  positive  pressure  technology 
must  be  utilized  to  prevent  future  contamination. 


Explosive  Dispensing  -  The  first  phase  of  the  detonator  loading  opera¬ 
tion  where  explosive  material  is  present  in  the  2 u  station  indexing  machine 
is  the  loading  of  N0L-130  primer  into  the  detonator  cup  at  stations  4  and  5. 
Potential  hazards  within  stations  4  and  5  include  those  resulting  from  manual 
replenishment  operations  and  those  resulting  from  detonator  loading  operations. 

During  explosive  refill  operations  mechanical  initiation  stimuli  are 
present  which  could  result  in  equipment  damage.  Potential  sources  of  lo¬ 
calized  initiations  are  primarily  available  from  frictional  stimuli  within 
the  linkages  of  the  dumping  mechanism  and  impact  stimuli  resulting  from 
equipment  failure.  Because  of  the  short  distance  the  explosive  falls  dur¬ 
ing  the  dumping  operation,  initiation  of  the  explosive  from  impingement  with 
the  bowl  is  considered  to  be  highly  unlkiely. 

During  the  volume  measurements  of  the  N0L-130  for  the  detonator,  an  in¬ 
itiation  stimulus  is  generated  by  the  friction  resulting  from  contact  of  the 
doctor  blade  with  the  spoon  and  friction  occurring  within  the  bearings. 

The  possibility  of  initiation  due  to  friction  between  the  scraper  bar 
and  spoon  is  very  remote  since  the  scraper  bar  is  made  of  conductive  Velo- 
stat  and  the  spoon  is  made  of  a  phenolic  molding  compound.*  When  the  process 
potential  between  the  sliding  surfaces  of  0.02  GPa  (2500  psi)  at  0.15  m/s 
(0.5  fps)  is  compared  to  the  material  response  for  N0L-130  using  similar  ma¬ 
terials  and  the  same  velocity,  the  safety  margin  is  found  to  be  37  and  the 
probability  of  explosion  is  found  to  be  less  than  5  x  10~lh.  For  this  event 


It  is  noted  in  correspondence  dated  July  8,  1980  from  Vincent  A.  Latuso 
of  ARRADCOM  that  the  spoon  material  is  being  changed  to  stainless  steel. 
This  will  not  change  the  friction  process  potential,  because  the  control¬ 
ling  factor  is  the  yield  strength  of  veloscat. 
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the  expectancy  is  6  x  10"  15  accidents  per  facility  hour.  Although  the  spoon 
is  made  of  phenolic  molding  compound  and  no  conductivity  requirement  is 
specified  on  its  drawing  (4A-22-T639) ,  there  is  no  electrostatic  hazard  since 
the  maximum  charge  that  should  accumulate  on  the  spoon  is  2.8  x  10"^  joules 
and  the  sensitivity  response  of  NOL-130  to  electrostatic  discharge  is  2.2  x 
10" 3  joules. 


In  the  analysis  of  this  operation,  it  was  found  that  a  failure  of  set¬ 
screws  on  the  spoon  could  cause  impact  events  by  allowing  the  spoon  or  the 
setscrews  to  fall  and  strike  contaminated  surfaces.  If  this  occurs,  a  process 
potential  of  greater  than  1.3  x  10^  J/m2  (6  ft-lb/in.^)  could  be  obtained. 

This  is  greater  than  the  impact  TIL  of  NOL-130,  which  is  3.5  x  103  J/m^  (1.7 
ft-lb/in.^),  calculated  by  converting  steel-to-steel  data  to  phenolic-to  steel.* 
This  potential  hazard  has  been  classified  as  II-A  because  expected  repair  time 
would  be  more  than  three  days.**  This  potential  hazard  will  create  an  acci¬ 
dent  expectancy  of  1.4  x  10“^  accident  per  facility  hour  which  will  not  meet 
the  design  goal  of  10”^  accidents  per  facility  hour  in  ?BM  Memorandum  385-5. 

To  ensure  compliance  with  the  specification,  it  is  recommended  that  a  redundant 
method  of  securing  the  spoons  to  the  holders  be  used  and  that  potting  be  applied 
to  any  setscrews  to  prevent  loosening.  In  the  event  that  this  total  station 
is  changed  to  a  modular  arrangement  in  which  repair  could  be  effected  within 
three  days,  this  classification  would  be  downgraded  to  a  category  III-A  hazard. 

The  primary  potential  hazard  encountered  during  the  metering  of  lead  azide 
is  friction  which  occurs  between  the  seal  and  the  rotating  ball.  If  the  seal 
becomes  worn,  lead  azide  will  be  allowed  to  build  up  on  rotating  surfaces.  If 
an  initiation  should  occur  in  a  build-up  of  explosives,  severe  equipment  dam¬ 
age  would  be  the  result.  For  the  potential  hazard,  an  explosion  probability 
was  determined  to  be  1.5  x  10~^  and  an  accident  expectancy  was  determined  to 
be  6  x  10"9  per  facility  hour.  To  assure  that  these  low  probabilities  continue 
to  exist,  normal  maintenance  procedures,  which  call  for  seal  refurbishment  every 
10,000  cycles,  should  be  followed  exactly.  These  procedures  should  be  evalu¬ 
ated  at  periodic  intervals  to  assure  that  this  refurbishment  schedule  is  ade¬ 
quate  to  prevent  buildup  of  significant  amounts  of  explosives  on  the  rotating 
surface.  IE  is  necessary  that  explosives  entering  the  feeder  be  free  of  foreign 
materials  because  particles  of  foreign  material  could  become  lodged  in  the  seal 
resulting  in  excessive  friction  or  could  damage  the  seal  which  might  allow 
excessive  buildup  of  explosives  on  the  ball. 


NOTES:  1.  A  dispenser  of  a  different  design  is  being  evaluated,  ac¬ 
cording  to  correspondence  dated  July  8,  1980  from 
Vincent  A  latu90  of  ARRADCQM. 

2.  10,000  cycles  are  equivalent  to  4  hours  10  min.  of  oper¬ 

ation  at  a  rate  of  40  cycles  per  minute. 


In  this  station,  and  in  other  stations  of  the  loader,  Garlock  bearings 
are  used  which  can  become  contaminated  with  lead  azide.  These  bearings  are 

*It  •••9  noted  in  correspondence  dated  July  8,  1980  to  Hercules  from  Vincent  A. 
Lacuso  of  ARRADC0M  that  consideration  was  being  given  to  changing  to  stainless 
steel  spoons.  Because  the  probability  of  initiation  is  one  for  both  phenolic 
material  and  steel  material  and  the  event  probability  it,  the  same  regardless 
of  material,  the  accident  expectancy  would  be  unchanged  by  using  stainless 
steel  spoons. 

Experience  on  single  tooled  loaders  indicate  that  repair  to  these  machines 
usually  takes  less  than  one  shift,  according  to  correspondence  dated  July  S 
1980  from  Vincent  A.  Latuso  of  ARRADCOM. 
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.made  up  of  three  bonded  layers  which  contain  a  middle  layer  of  porous  bronze 
in  which  the  pores  are  filled  with  a  mizture  of  polytetrafluoroethylene  (TFE) 
lead  mixture  and  a  surface  layer  of  about  0.001  inch  thick  of  the  same  TFE- 
lead  mixture.  In  operation,  the  outer  coating  of  the  sleeve  type  bearings 
will  wear  and  expose  the  bronze  to  contamination  with  lead  azide.  ARMCOM  sup¬ 
plements  on  Form  47-R  state  that  lead  azide  should  not  be  exposed  to  copper 
or  alloys  containing  copper  because  of  the  possible  formation  of  other  azides 
more  sensitive  than  lead  azide.  It  is  recommended  that  these  bearings  be 
replaced  by  a  material  more  compatible  with  lead  azide.* 

The  primary  hazards  associated  with  the  placement  of  RDX  pellets  in 
the  detonator  are  those  resulting  from  equipment  failure  or  equipment  align¬ 
ment  which  could  impart  friction  and  impact  stimuli  to  the  explosive.  These 
potential  hazards  as  listed  under  stations  14  and  15  of  table  9  have  acci¬ 
dent  expectancies  ranging  from  8  x  lCT^  to  4  x  10”^^  accidents  per  facility 
hour.  These  expectancies  are  within  the  design  goals  of  the  specification 
and  can  be  minimized  by  the  planned  daily  equipment  checks  to  ensure  that 
the  pellet  slide  moves  freely;  i.e.,  is  free  from  binding.  As  part  of  the 
daily  check  it  is  recommended  that  a  visual  inspection  of  the  tool  which 
punches  the  pellet  downward  into  the  detonator  cup  be  performed.'  This  will 
ensure  that  working  alignment  is  proper  and  that  contact  is  not  being  made  with 
the  pellet  slide. 


Material  Consolidation  -  Compaction  of  the  explosives  into  the  detonator 
cup  is  performed  in  three  different  pressing  operations  using  tool  steel 
punches  energized  by  the  mechanical  action  of  the  center  post  of  the  press, 
and  controlled  by  air  cylinders.  Compaction  pressures  on  the  explosives  are 
approximately  0.5  GPa  (85,000  psi)  for  NOL-130,  0.10  GPa  (15,000  psi)  for 
lead  azide  and  0.07  GPa  (10,000  psi)  for  the  RDX  pellet. 

Potential  initiation  hazards  during  these  operations  can  result  from 
misalignment  of  the  powder  guide,  overpressurization,  pressurizing  when  no 
detonator  cup  i3  present  and  pressurization  when  a  defective  detonator  is 
present.  During  these  operations,  the  in-process  potential  of  4.1  GPa  (600K 
psi)  at  1.0  m/s  (3.3  fps)  greatly  exceeds  the  friction  material  response  of 
0.13  GPa  (19K  psi)  at  0.15  m/s  (0.5  fps)  for  NOL-130  and  the  material  re¬ 
sponse  for  friction  of  0.2  GPa  (28K  psi)  at  0.15  m/s  (0.5  foa)  for  lead  azide 
for  the  potential  hazard  due  to  misalignment  of  the  powder  guide.  For  this 
event,  the  accident  expectancy  is  8  x  10~®  accidents  per  facility  hour. 

If  the  cup  is  deformed  when  the  explosive  is  added,  the  compression  ram 
could  possibly  impose  abnormal  impact  and  friction  stimuli  on  the  explosive 
material  trapped  in  the  crumpled  area  of  the  detonator.  Because  ignition 
of  any  explosive  material  would  be  expected  to  result  in  only  minor  damage 
to  the  equipment,  the  hazards  associated  with  the  compression  operations 
have  been  classed  as  category  III-A  hazards. 

The  identified  potential  initiation  accident  expectancies  for  these 
ram  pressing  stations  are  within  the  design  goal  of  PBM  Memorandum  385-3 
and  range  from  8  x  10"^  to  4  x  lO-^®  accidents  per  facility  hour. 


Detonator  Cup  Sealing  -  Sealing  of  the  detonator  cup  is  performed  by 
placement  of  a  foil  disc  onto  the  explosive  in  the  cup  and  bv  crimping  of 
the  aluminum  cup  over  the  foil.  Initiation  of  the  explosive  in  the  detonator 


*It  is  noted  in  correspondence  dated  Julv  8,  1980  to  Hercules  from  Vincent  A. 
Latuso  of  ARRADCOM  that  IAAP  has  used  bronze  bearings  for  many  years  with 
no  incidents. 


can  occur  from  friction  and  impact  stimuli  during  these  operations.  During 
the  placement  of  the  foil  into  the  cup,  friction  occurs  between  the  alumi¬ 
num  surfaces  of  the  cup  and  the  foil  with  in-process  energy  potentials  of 
0.03  GPa  (5K  psi)  at  0.15  m/s  (0.5  fps)  being  obtained  with  resulting  j.:cety 
margins  varying  from  2  to  10.  The  accident  expectancy  for  placement  of 
the  foil  on  the  cup  is  2  x  10~8  accidents  per  facility  hour. 

If  aspiration  of  the  detonator  cup  was  not  satisfactorily  performed 
during  the  previous  operation,  explosive  contamination  will  be  present  dur¬ 
ing  foil  placement  and  during  crimping  operations.  This  would  result  in  a 
friction  stimulus  being  introduced  to  the  detonator  cup  through  contact  of 
the  foil  disc  and  cup  during  foil  placement,  and  would  also  result  in  a  fric¬ 
tion  stimulus  occurring  within  the  folds  of  the  cup  during  the  crimping 
process.  To  minimize  the  probability  of  occurrence  of  these  potential  haz¬ 
ards,  it  is  recommended  that  the  aspirating  stations  be  inspected  on  a  daily 
basis  to  ensure  adequate  removal  of  excess  explosive  material  from  the  cup. 
During  the  crimping  operation,  the  process  potential  energy  for  friction  be¬ 
tween  the  aluminum  and  steel  surfaces  can  be  as  high  as  0.1  GPa  (15K  psi)  at 
0.09  m/s  (0.3  fps).  When  compared  to  the  material  response  for  RDX  a  safety 
margin  of  3  and  a  probability  of  6.2  x  10“^  that  an  explosion  will  occur  are 
observed. 

Impact  and  friction  initiation  of  the  explosive  can  possibly  occur  dur¬ 
ing  placement  of  the  foil  or  crimping  of  the  cup  if  either  the  cup  or  the 
hydraulically-actuated  backup  linkages  become  stuck  in  one  position.  If 
this  should  occur,  the  foil  placement  punch  or  crimping  tool  will  be  lowered 
by  action  of  cams  to  a  fixed  position,  resulting  in  impact  or  friction  be¬ 
tween  the  cup  and  the  punch.  The  accident  expectancies  for  the  crimping 
operation  range  from  2  x  10“^  accidents  per  facility  hour  for  the  event  in 
which  the  cup  becomes  stuck  in  position  to  1.1  x  lO--*--1-  accidents  per  facil¬ 
ity  hour  for  the  crimping  event  in  which  failure  of  the  foil  occurs.  To 
minimize  the  probability  of  occurrence  of  these  potentially  hazardous  events, 
it  is  recommended  (1)  that  the  tooling  be  inspected  frequently  to  assure  that 
no  defects  which  could  cause  sticking  are  present,  and  (2)  that  the  hydraulic 
backup  system  be  tested  periodically  to  make  certain  that  it  is  free  to  move. 


Aspiration  Station  -  In  the  aspirator  system,  all  lines  should  be  grounded 
and  should  be  as  short  as  possible  to  prevent  the  accumulation  of  any  explo¬ 
sive  fines  and  to  minimize  buildup  of  electrostatic  charges.  Frequent  changes 
of  the  trap  are  recommended.  The  use  of  a  glass  trap,  as  denoted  in  the 
equipment  data  specification  manual,  is  not  recommended  for  the  containment 
of  explosive  materials.  It  is  recommended  that  the  glass  bottle  be  replaced 
with  a  suitable  conductive  plastic  material  to  prevent  discharge  of  glass 
splinters  in  the  event  that  an  explosion  occurs  during  operating  or  mainten¬ 
ance  operations. 

Additionally,  it  is  recommended  that  all  aspirating  stations  be  checked 
daily  for  proper  operation.  The  use  of  sensors  should  be  considered  to  en¬ 
sure  that  all  stations  are  functioning  as  intended.  Inadequate  pickup  by 
the  aspirator  will  permit  contaminated  conditions  to  exist  at  all  stations 
of  the  loader  which  will  contribute  to  initiation. 


Defective  Detonator  Disposal  -  Defective  detonators  are  removed  from 
the  work  station  and  dropped  through  a  steel  chute  into  disposable  contain¬ 
ers  which  contain  water.  Because  the  steel  enclosure  surrounds  the  dis¬ 
posable  containers  and  because  the  detonators  fall  into  a  water  filled  con¬ 
tainer,  no  major  hazards  were  identified  for  this  system.  These  containers 
are  replaced  with  clean  containers  at  periodic  intervals  during  the  day  with 
a  maximum  of  200  allowed  to  accumulate.  It  is  noted  that  detonators  could 
be  rejected  after  sealing  which  would  make  them  watertight,  and  therefore 
could  still  be  subject  to  detonation.  Therefore,  manual  handling  of  the  re¬ 
ject  container  and  detonators  should  be  performed  with  extreme  caution. 


22 


CONCLUSIONS  AND  RECOMMENDATIONS 


A  hazard  evaluation  and  safety  study  has  bt^n  conducted  on  :he  Multi- 
tooled  Iowa  detonator  loader  in  compliance  with  contract  requirements.  As 
analyzed,  the  detonator  loader  does  not  meet  the  requirements  of  the  con¬ 
tract  specifications  in  three  areas.  These  are:  (1)  compliance  to  the 
design  goal  of  1  x  10“^  accidents  per  facility  hour  for  a  class  II-A  haz¬ 
ard,  (2)  the  use  of  copper  alloy  materials  in  sleeve  bearings,  and  (3)  the 
exposure  of  operators  to  hazards  more  severe  than  a  Class  IV  hazard.  These 
deviations  from  the  specifications  have  been  addressed  in  greater  detail  in 
the  report  body. 


1.  Personal  Injury  Due  to  Fire  or  Explosion 

Four  areas  are  of  concern  which  could  result  in  personal  injury  due 
to  fire  or  explosion  during  process  operations.  These  are  (1)  during  re¬ 
plenishment  of  explosives  to  the  detonator  receivers,  (2)  during  mainten¬ 
ance  of  the  system  or  during  "process  upset"  conditions  where  operators  re¬ 
move  the  shield  to  correct  problems,  (3)  during  daily  cleaning  of  the  ma¬ 
chine  and  aspirators  and  during  removal  of  defective  detonators,  and  (4)  from 
an  initiation  within  the  machine  where  injury  results  from  emitted  projec¬ 
tiles  or  from  secondary  reactions  of  the  operator. 

The  loading  of  the  explosive  hoppers  is  of  concern  due  to  the  sen¬ 
sitive  nature  of  the  explosives  and  the  possibility  of  injury  if  detonation 
should  occur.  Prevention  of  problems  in  this  area  requires  rigid  procedure 
control  and  operator  grounding  to  prevent  initiation  from  static  electricity. 

The  second  problem  of  injury  during  maintenance  requires  (1)  potting 
of  exposed  threads,  bolts,  etc.  to  prevent  explosive  contamination  and  sub¬ 
sequent  initiation  during  adjustment  by  personnel,  and  (2)  rigid  control  of 
tools  to  prevent  initiation  by  impact  of  dropped  tools  or  initiation  during 
start-up  as  a  result  of  tools  having  been  left  in  the  process. 

The  hazards  associated  with  cleaning  the  aspirators  can  result  from 
the  initation  during  cleaning  of  any  explosive  dust  retained  in  the  tooling, 
the  possibility  of  an  incident  resulting  from  the  use  of  alcohol  to  clean 
lines  with  insufficient  ventilation,  and  the  hazard  of  an  exploding  glass 
container  when  cleaning  the  aspirator  trap.  Proper  precautions  and  safety 
procedures  must  be  employed  during  these  operations  to  reduce  the  potential 
for  an  injury.  The  glass  jar  of  the  aspirator  crap  should  be  replaced  with 
a  jar  fabricated  from  a  conductive  plastic  material  which  is  compatible  with 
the  explosives.  Additionally,  procedures  for  proper  handling  of  the  reject 
detonators  must  be  rigidly  enforced  during  manual  removal  from  the  machine 
and  during  transfer  to  the  disposal  location.  Rejects  should  not  be  manually 
removed  from  the  machine  while  the  machine  is  operating  and  procedures  for 
limiting  the  quantity  of  rejects  within  a  reject  container  should  be  enforced. 

Injury  to  personnel  from  explosions  within  the  machine  can  occur  if 
operators  block  off  safety  interlocks  when  refilling  the  explosive  container 
or  performing  adjustments  within  the  shield.  This  type  of  activity  should 
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not  be  tolerated.  If  an  explosion  which  occurs  within  the  shielded  portion 
of  the  machine  is  witnessed  by  an  operator,  temporary  blindness  or  possibly 
eye  damage  to  the  operator  could  result.  Also,  the  operator  could  react 
suddenly  away  from  the  machine  and  possibly  strike  other  equipment  or  other 
personnel.  Therefore,  protective  eye  wear  should  be  worn  during  performance 
of  certain  operations  when  the  operator  is  in  close  proximity  to  the  machine 
and  observing  an  operation,  such  as  that  of  explosive  replenishment. 

All  electric  motors  and  components  are  specified  as  explosion  proof 
class  II  which  is  satisfactory  for  dust  but  not  for  operating  in  the  presence 
of  flammable  vapors.  Therefore,  if  alcohol  or  other  solvents  are  to  be  used 
near  any  electrical  utilities  or  assemblies  the  electrical  equipment  should 
be  classified  explosion  proof  Class  I,  Group  D. 


2.  Equipment  Damage 

The  new  loader  processes  four  detonators  simultaneously  from  one 
station  co  the  next.  To  reduce  severity  of  an  incident,  there  must  not  be 
a  propagation  link  between  stations  or  a  propagation  link  between  any  deto¬ 
nator  and  an  explosive  hopper.  Therefore,  the  table  and  path' of  the  deto¬ 
nators  must  be  maintained  such  that  an  explosion  cannot  propagate  due  to  the 
presence  of  contamination.  A  continuous  chain  of  explosive  does  exist  at 
the  N0L-130  dispensing  station.  It  is  suggested  that  this  station  be  exam¬ 
ined  closely  to  determine  what  modification  would  be  required  to  prevent  an 
incident  from  propagating  to  the  explosive  in  the  bowl  if  initiation  of  the 
detonator  occurred  during  loading  operations. 

Because  of  the  susceptibility  of  N0L-130  to  initiation  by  impact, 
potential  hazards  which  can  provide  impact  stimuli  to  the  explosive  should 
be  minimized.  An  impact  stimulus  to  the  N0L-130  in  the  Cargile  container 
can  occur  from  a  dropped  spoon  or  from  a  setscrew  used  to  secure  spoons  to 
the  holder.  This  potential  hazard  will  create  an  accident  expectancy  of 
1.4  x  10" 5  accidents  per  facility  hour  which  will  not  meet  the  design  goal 
of  1  x  10~5  accidents  per  facility  hour  for  a  category  II-A  hazard  in  PBM 
Memorandum  385-3.  To  reduce  this  accident  expectancy,  it  is  recommended 
that  a  redundant  means  be  employed  to  secure  the  spoons  to  the  holder  and 
that  the  present  setscrews  securing  the  spoons  to  the  holder  be  sealed  with 
a  thread  adhesive  and  be  potted  to  prevent  them  from  loosening  and  falling. 


3.  Localized  Reactions 

Localized  reactions  during  process  operations  resulting  from  fric¬ 
tional  stimuli  within  the  linkages  of  moving  equipment  can  be  reduced  by 
the  elimination  of  metal- co-metal  contact. 

Additional  localized  reactions  may  occur  after  a  period  of  opera¬ 
tion  due  to  the  reaction  of  lead  azide  contamination  with  bronze  material 
used  In  the  sleeve  bearings  of  the  loader.  Since  copper/bronze  will  react 
with  lead  azide  to  form  a  more  sensitive  azide  component,  it  is  recommended 
that  the  use  of  Garlock  bearings  containing  bronze  be  replaced  with  bearings 
containing  a  more  compatible  material.* 

♦It  is  noted  in  correspondence  dated  July  8,  1980  to  Hercules  from  Vincent 
A.  Latuso  of  ARRADCOM  that  IMP  has  used  bronze  bearings  for  many  years 
with  no  incidents. 


2d 


T 

* 

% 

1 

51 


“roS  s  ^^J^iSeS-x 

HSSLs 

SSSHS  S^^ssswr 

the  process  to  a  single  discharge  point. 


4.  Major  Equipment  Damage 

Accumulation  of  explosive  into  the  interior  of  the  turntable  could 
uossiblv  result  in  major  equipment  damage  and  injury  to  operating  and  main 
^  J  0„nnnpi  Therefore,  it  is  recommended  that  the  prototype  mach 
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-  ...  4-^-rior  has  occurred.  If  contamination  is  apparent,  seals  r  ? 
tive  pressure  technology  muse  be  utilised  to  prevent  future  contamination. 
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is  exceeded  by  0.050  in.,  the  detonator  is  removed  oanual.y. 
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STATUS 

CODE 

Rev.  1 

Equipment  Technical  Data  Package  Specifications.  Manual 
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Equipment  Manual  for  X4  Series  Iowa  Loader 


Operating  and  Maintenance  Procedures  (Six  Sheets) 
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APPENDIX  B 


PROBIT  PLOTS 


The  data,  generated  by  sensitivity  tests  performed  on  prior  contracts  by 
Hercules,  were  used  to  prepare  probit  curves  by  plotting  percentage  of  test 
initiations  versus  the  test  energy.  Probit  plots  were  generated  for  fric¬ 
tion,  impact  and  ESD  at  the  50%  and  95%  confidence  levels  and  are  shown  in 
Figures  2  through  18.  Friction  material  response  levels  for  the  explosives 
at  velocities  lower  than  the  test  velocities  were  obtained  from  the  fric¬ 
tion  velocity  profile  shown  as  Figure  1.  These  plots  were  then  used  in  the 
analysis  to  determine  probability  of  initiation  for  an  explosive  at  an  energy 
level  available  in  the  system  as  the  in-process  stimuli. 


PRESSURE,  GPa  (psi  x  10 


I _ 1 _ I _ I _ I _ _ I 

0  2  4  6  8  II 

VELOCITY  OF  TEST  COMPONENTS,  f/s 


Figure  l.  Friction  -  velocity  profile 
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PROBABILITY  OF  INITIATION 
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0.977 


95%  CONFIDENCE  LIMIT 


"V 
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0.0015 


3.3x10' 


2.5x10 


•50%  CONFIDENCE  LIMIT 


1.0x10 


1.0x10 


5.0x10 


E$D,  Joules 


Figure  u.  ESD  probit  data  for  N0L-I3Q 


£  3.3x10 


2.5x10 


1.0x10 


95%  CONFIDENCE  LIMIT 


S70 


-50%  CONFIDENCE  LIMIT 


-12  f 

1.0x10 

/ 


5.0x10 


0.001 


FRICTION,  Gpo 


Figure  5.  Friction  probit  \iata  ioc  KOL-130,  sceci/stael  at  0.3  e>/'s 


FRICTION,  Gpo 


Figum  6.  Friction  probit  data  tor  SOL-130,  steel/stecl  at  0.15  o/s 


PROBABILITY  OF  INITIATION 


FRICTION,  Gpc* 


PLgur«  8.  Friction  probit  data  for  !IOL-130.  stoei/aluainua  at  0.15 


Figure  10.  ESD  probit  data  for  lead  azide 
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Figure  14.  Impact  probit  data  for  RDX,  steel/steel 
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Figure  15.  ESD  probit  data  for 


PROBABILITY  OF  INITIATION 


Figure  17.  Friction  probit  data  for  RDX,  steel/steel  at  0.3  m/s 
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APPENDIX  C.  EXPLANATION  OF  HAZARD  ANALYSIS  TABLES 


This  cable  offer? 
found  in  Che  "Engines 
in  chis  reporc. 

Column  Tide _ 

Operacion 

Pocencial  Iniciacion 
Hazard 

Initiation  Mode 

Combustible  Present 

Process  Potential 


Material  Response 


5  a  description  of  che  different  cvpes  of  entries 
-ing  Analysis  and  Hazard  Evaluation"  tables  found 


_ _ Explanation _ 

Processing  operation  being  analyzed. 

This  column  states  the  specific  event  or 
operation  that  has  been  determined  to  be 
potentially  hazardous. 

The  specific  mode(s)  by  which  the  event  can 
cause  initiation.  In  some  cases  an  event 
can  cause  initiation  by  more  than  one  mode. 
Examples  of  initiation  modes  include  impact, 
friction,  ESD,  and  impingement.  Also  listed 
here  are  che  materials  of  construction  as¬ 
sociated  with  the  potential  hazard. 

In  this  column,  the  combustible  material 
(Ncl-130,  Lead  Azide  and  RDX)  are  specified. 

The  process  potential  is  the  result  of  the 
determination  of  the  process  stimuli  or 
energy  that  can  be  generated  by  the  evei.u. 
This  can  be  determined  by  direct  neasurement, 
laboratory  simulation,  or  calculation.  For 
analyses  involving  design,  development,  or 
prototype  equipment,  process  potentials  are 
usually  calculated  utilizing  knowledge  of 
che  equipment  drawings,  operating  procedures 
and  characteristics  of  che  materials  of 
construction  (yield  strengths,  for  example). 
To  ensure  a  conservative  analysis,  the  cal¬ 
culations  are  based  on  the  most  severe  proc¬ 
essing  condition. 

The  material  response  is  listed  as  the 
threshold  initiation  level  (i.e.,  the  high¬ 
est  cost  level  at  which  no  initiation  is 
evid® — J  in  a  fixed  number  of  trials)  of 
the  combustible  material.  This  has  been 
established  from  previous  initiation  tests. 
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APPENDIX  C  (CONT'D.) 


Column  Title 


Safety  Margin 


Probability  of  Event  (Ep) 


Probability  of 
Combustible  (Cp) 


Probability  of 
Initiation  (Ip) 


Probability  of  FL&  (Fp) 


_ Explanation _ 

■^e  safety  margin  (SM)  is  equal  to  material 
response  (MR)  divided  by  the  process  po¬ 
tential  (PP)  less  one. 


SM 


MR 

PP 


1 


Ep  is  the  probability  of  the  hazardous 
event  occurring  and  is  numerically  equal 
to  one  for  normally  occurring  events.  For 
abnormal  events,  the  probability  is  estab¬ 
lished  from  the  appropriate  equipment  or 
human  failure  rate.  Equipment  failure 
rates  are  obtained  from  one  of  several 
available  data  banks.  Human  error  prob¬ 
abilities  have  been  established  from  past 
history  and  indicate  that  the  probability 
per  event  of  an  operator  making  an  error 
in  following  procedures  is  1  x  10-3,  of 
dropping  an  item  is  1  x  lCT^  and  the  prob¬ 
ability  of  an  accidental  situation  ranges 
from  1  x  10-3  to  1  x  10-5  depending  upon 
the  labor  intensity  of  the  operation.  In 
many  cases,  the  event  is  dependent  on  a 
combination  of  more  than  one  equipment 
and/or  human  failure  races. 

The  probability  of  combustible  iCp)  is  the 
probability  that  the  combustible  material 
is  present  where  and  when  the  hazardous 
event  occurs.  Cp  is  equal  to  one  where 
explosive  is  normally  present.  Where  it 
is  not  normal  for  the  combustible  to  be, 

Cp  depends  upon  the  event (s)  necessary 
for  the  combustible  to  be  present. 

The  probability  of  initiation  is  determined 
by  statistically  comparing  the  process  po¬ 
tential  with  the  results  of  initiation  (ma¬ 
terial  response)  tests  conducted  on  the 
combustible  material.  The  probit  curves  are 
used  in  making  these  determinations. 

The  probability  is  the  product  of  ail  the 
listed  probabilities. 

rp  *  £p  s  Cp  *  Ip 


APPENDIX  C  (CONT'D.) 


Column  Title 


Probability  of 
Explosion  (Xp) 


Hazard  Category 


_ Explanation _ 

The  probability  of  fire  (Fp)  multiplied  by 
the  probability  of  the  transition  of  a  fire 
to  an  explosion.  This  is  evaluated  by  con¬ 
sidering  the  critical  height  to  explosion, 
confinement  characteristics,  quantity  of 
explosive  present,  and  similar  data. 

Xp  =*  Ep  y  Cp  x  Ip  x  Tp 

Hazard  severity  categories  as  classified  in 
WCttf-FBM  385-3. 
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APPENDIX  D. 


DETERMINATION  OF  PROBABILITY  OF  INITIATION  VIA  SAFETY  FACTORS 


Determining  probability  of  initiation  using  the  safety  factor  approach 
is  analogous  co  determining  reliability  tor  stress-strain  problems.  The 
expression  for  determining  the  probability  of  initiation  is  as  follows: 


Z 


(C-l) 


where:  PP 
MR 

o 

<r?  P 

? 

trap 

z 


=  process  potential 
*  material  response 
■  variation  for  the  process  potential 
=  variation  for  the  material  response 

=■  standard  normal  deviate  whose  value  yields 
che  probability  of  initiation 


The  safety  factor  is  defined  as: 


Safety  Factor  (SF)  •  ~ 


Tne  above  expression  becomes: 


z  -  LzJLL.  (c-2) 

/  (CVpp)-  ♦  (MS)-  <CVMR)‘ 

where:  CYpp  ”  coefficient  of  variation  for  che  process  potential 
CV\^  -  coefficient  of  variation  for  the  materia!  response 

The  expression  was  adjusted  to  compensate  for  the  fact  that  the  TIL  is  uti¬ 
lised  in  determining  the  safety  factor.  This  yields: 

1  -  SF 

Z  -  -  -  =  -  ■■■'  =====  =a==a=  _  *.£4  fC-3) 

J(CV?P)-  +  (SF)*  (CVj^)* 

The  5 . Hi  factor  is  the  standard  normal  deviate 
(l-O.TJJ),  or  0/20  tests. 


{■'T  a  probability  cf  2.06' 


APPENDIX  D  (CONT'D.) 


The  variation  for  the  material  response  has  been  shown  to  be  quite 
large  compared  to  the  variation  of  the  process  potential.  Thus,  equation 
C-3  reduces  to 

7  1  -  SF  -  1.84  (C-4) 

"  (SF)  (CVm) 


The  Z  factor  expression  can  then  be  utilized  to  evaluate  the  probabil¬ 
ity  of  initiation. 
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